LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Chained webOS flaws allow local-network pre-auth root on some LG smart TVs.
SSD Secure Disclosure said three LG webOS vulnerabilities can be chained so an attacker on the same local network gets root on certain smart TVs without a PIN or owner interaction. The chain was tested on the 32LQ636BPSA and 27TQ600SW running webOS 7.5.7-25, firmware 04.54.40; impact on other models is unknown. It abuses the port 3001 ThinQ pairing service and built-in apps to reach a root system service. LG has issued a fix. No CVE identifiers were assigned, and no exploitation in the wild has been reported.
- Three webOS bugs chain to pre-auth root from the same local network.
- Tested on 32LQ636BPSA and 27TQ600SW, webOS 7.5.7-25, firmware 04.54.40.
- Entry is the ThinQ pairing service on port 3001; no PIN is required.
- LG issued a fix; no workaround exists for TVs that cannot update.
- No CVEs assigned and no in-the-wild exploitation reported.
- Vendors
- LG
- Organizations
- SSD Secure DisclosureBitdefender
From the original article
2 min read at thehackernews.com
Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.